Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D84F7/A0581C66BC7A11F1812113ED5911F970/A565D4CEBD6411F1A6562A506111F970.roa
File:                     A565D4CEBD6411F1A6562A506111F970.roa (raw, json)
Hash identifier:          T/xEOQEiJQhdgw15tZDJt1DA4Dw7ba/+Rtzg+a2osjk=
Subject key identifier:   87:C6:0C:D8:AD:F2:BA:A4:C1:3D:8E:4E:41:52:81:92:B1:58:4F:EF
Certificate issuer:       /CN=A91D84F7/serialNumber=E2E9D70EF0C21921C40C90C63A15890334061E0A
Certificate serial:       05
Authority key identifier: E2:E9:D7:0E:F0:C2:19:21:C4:0C:90:C6:3A:15:89:03:34:06:1E:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4unXDvDCGSHEDJDGOhWJAzQGHgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D84F7/A0581C66BC7A11F1812113ED5911F970/A565D4CEBD6411F1A6562A506111F970.roa
Signing time:             Thu 01 Oct 2026 06:52:20 +0000
ROA not before:           Thu 01 Oct 2026 06:52:20 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     219329
IP address blocks:        2402:7aa0:604::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D84F7/A0581C66BC7A11F1812113ED5911F970/4unXDvDCGSHEDJDGOhWJAzQGHgo.crl
                          rsync://rpki.apnic.net/member_repository/A91D84F7/A0581C66BC7A11F1812113ED5911F970/4unXDvDCGSHEDJDGOhWJAzQGHgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4unXDvDCGSHEDJDGOhWJAzQGHgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 04:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D84F7, serialNumber=E2E9D70EF0C21921C40C90C63A15890334061E0A
        Validity
            Not Before: Oct  1 06:52:20 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abe0324-d72c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cd:00:3c:c5:48:0f:b9:fd:b7:63:11:d3:fd:
                    67:ec:42:2f:ef:b8:1c:97:23:55:57:c4:96:60:da:
                    69:e1:ed:0d:c7:ae:4b:f9:f7:f6:4c:9b:2f:dd:24:
                    95:f1:3a:29:c9:48:07:02:f8:09:53:c2:e9:85:a4:
                    f6:0a:6f:ef:d7:be:ad:93:89:b2:c8:12:fe:e8:66:
                    a6:24:a7:86:aa:16:4f:2b:0d:e7:2b:24:39:77:95:
                    db:19:0e:ea:1e:65:51:06:7b:a6:ca:fb:95:7f:43:
                    26:78:ad:89:36:26:06:66:ab:43:d9:df:e9:97:cf:
                    c5:72:47:b0:92:9e:7b:4a:89:55:b8:0a:9d:a4:be:
                    45:4d:3e:94:61:31:0e:26:cf:87:6d:b8:c4:00:6a:
                    d3:6b:76:55:a9:5b:55:0a:09:c7:2d:c5:e7:b8:a2:
                    e9:50:a0:e7:f2:c7:d6:fa:60:93:35:91:ec:9f:f4:
                    41:ac:b0:c6:87:93:62:95:7f:25:33:85:56:51:2d:
                    3b:13:e8:14:9d:a3:95:56:a0:e3:c2:94:bb:6e:83:
                    aa:c5:d8:c0:30:11:ee:19:f3:a3:3e:49:83:06:ae:
                    b6:7f:ed:8e:01:73:1e:d3:1e:10:4d:a1:ac:91:ed:
                    7b:ae:a4:fc:ae:c5:b4:29:85:4f:72:21:9e:e4:12:
                    da:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C6:0C:D8:AD:F2:BA:A4:C1:3D:8E:4E:41:52:81:92:B1:58:4F:EF
            X509v3 Authority Key Identifier:
                keyid:E2:E9:D7:0E:F0:C2:19:21:C4:0C:90:C6:3A:15:89:03:34:06:1E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D84F7/A0581C66BC7A11F1812113ED5911F970/4unXDvDCGSHEDJDGOhWJAzQGHgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4unXDvDCGSHEDJDGOhWJAzQGHgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D84F7/A0581C66BC7A11F1812113ED5911F970/A565D4CEBD6411F1A6562A506111F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7aa0:604::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:50:94:09:06:c0:1d:42:34:48:df:db:b9:ae:fb:68:76:37:
         f6:9c:e9:15:91:dd:c5:b6:3a:25:b3:2d:6b:ca:64:e8:06:27:
         34:c5:5e:da:df:1e:9b:7f:c3:39:29:30:30:1d:78:a9:46:69:
         91:e9:fa:7b:b4:69:b3:4f:c6:70:8d:20:e6:93:ca:c9:81:53:
         6a:ef:c9:aa:8f:08:a5:16:72:57:14:93:95:fd:30:78:10:db:
         2f:40:a2:ac:60:ba:15:7a:6e:7a:3e:fa:7c:e8:7f:96:68:f2:
         cc:da:07:48:8a:a2:8c:c8:d6:93:3c:7e:15:97:88:b9:59:8f:
         59:e4:29:44:8a:4d:bc:c7:28:76:37:c5:17:51:3e:bb:39:3f:
         ab:fb:c6:0c:67:94:7d:10:27:56:66:1a:d0:1f:4c:94:0c:03:
         64:b4:c9:0d:c1:12:00:b1:b3:14:39:52:b0:55:8b:79:d7:7d:
         a2:25:68:d5:8e:c9:f6:93:2e:c3:4e:3f:ab:c8:92:75:34:a5:
         a4:2a:c3:24:84:0f:c5:d8:76:b1:f6:2b:4f:0d:31:f9:78:b3:
         4b:24:01:3f:eb:a4:3e:d2:ec:a4:76:ca:ff:f2:43:a6:67:7c:
         fe:ab:22:10:ec:85:20:b5:d1:c5:e8:c8:2d:25:cb:5b:58:6d:
         66:0f:1c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:59:34 2026 by rpki-client